Retour
-
Titre
LDAP Configuration does not function properly when SSL (port 636) is used -
Description
The following error is seen in the Foglight Management Server logs when LDAP is configured using port 636:
YYYY-MM-DD HH:MM:SS WARN [http-0.0.0.0-8080-2] com.quest.nitro.service.security.auth.spi.NitroExtendedLdapLoginModule - Error connecting to LDAP server: ldaps://XX.XX.XX.XX:636/
javax.naming.CommunicationException: simple bind failed: XX.XX.XX.XX:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] -
Cause
CAUSE 1
SSL Certificates have not been imported correctly to the Foglight Management Server (cacerts keystore) Foglight/jre/lib/security/cacert(This one has the ldaps configuration in case it has been configured)
CAUSE 2
SSL Certificates are not valid.
-
Résolution
Ensure to import valid certificates to the Foglight Management Server.
For additional information on how to import the certificates refer to Encrypt communication between the Foglight Management Server and the LDAP server (4286322).